ja4x certificate template

JA4X 2166164053c1…

56 convicted hosts presented certificates built from one template: the same certificate fields, in the same order. A shared template points to shared tooling.

2166164053c1_2166164053c1_000000000000

feed checked TLP:CLEAR
hosts 56 55 still listed
listings 60
networks 25
first seen 2026-06-13

Ports

:6000048:4435:84432:44331:44431:80801:200601:323411

Detection packs

Rules for this hub's 55 still-listed hosts, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Cohorts

Hosts on this template that also share an issuer name and a not-before day: one issuance step run for several hosts. Kinship, not attribution.

Hosts

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

8.216.63.147ViperAS45102 · Alibaba (US) Technologylast confirmed 2026-10-3043.161.252.125ViperAS132203 · Tencent Building, Kejizhongyi Avenuelast confirmed 2026-10-18159.75.118.45ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30137.220.153.29ViperAS4907 · BGPNET PTElast confirmed 2026-10-25143.110.219.27PoshC2 +1AS14061 · DigitalOceanlast confirmed 2026-10-3081.70.224.95ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30154.219.123.78ViperAS402506 · Zenixcloudlast confirmed 2026-10-17134.175.151.226ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30119.29.203.227ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-21117.50.81.123ViperAS23724 · IDC, China Telecommunicationslast confirmed 2026-10-20154.31.219.211ViperAS18186 · Nebula Globallast confirmed 2026-10-30152.32.133.192ViperAS135377 · UCLOUD INFORMATION TECHNOLOGY (HK)last confirmed 2026-10-16176.120.22.129PoshC2AS198953 · Proton66 OOOlast confirmed 2026-10-29103.215.81.156ViperAS55933 · Cloudielast confirmed 2026-10-30159.223.145.166PoshC2AS14061 · DigitalOceanlast confirmed 2026-10-01137.184.139.185PoshC2AS14061 · DigitalOceanlast confirmed 2026-10-0382.156.166.227ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3067.216.197.83ViperAS25820 · IT7 Networkslast confirmed 2026-10-3047.94.13.0ViperAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-3023.94.27.110ViperAS36352 · HostPapalast confirmed 2026-10-11176.120.22.127PoshC2AS198953 · Proton66 OOOlast confirmed 2026-10-30208.87.201.226ViperAS133199 · SonderCloudlast confirmed 2026-10-30203.195.217.161ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30192.144.211.249ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-12180.101.25.48ViperAS4134 · No.31,Jin-rong Streetlast confirmed 2026-10-30154.219.105.134ViperAS401701 · cognetcloudlast confirmed 2026-09-13152.42.185.244ViperAS14061 · DigitalOceanlast confirmed 2026-10-30139.212.143.218ViperAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-09124.220.161.214ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30122.51.215.90ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30117.72.32.75ViperAS141679 · China Telecom Beijing Tianjin Hebei B…last confirmed 2026-10-25111.170.148.134ViperAS151185 · China Telecomlast confirmed 2026-10-30106.52.255.211ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-11104.225.149.151ViperAS25820 · IT7 Networkslast confirmed 2026-09-17103.236.69.102ViperAS134768 · CHINANET SHAANXI province Cloud Base…last confirmed 2026-10-30103.142.147.17ViperAS135581 · 19 Chun Wang Street, Tseung Kwan O In…last confirmed 2026-10-19103.39.79.102ViperAS932 · XNNETlast confirmed 2026-10-30101.34.222.38ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3085.137.240.26ViperAS401701 · cognetcloudlast confirmed 2026-09-0760.205.115.92ViperAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-2047.108.140.10ViperAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-09-1347.86.97.42ViperAS45102 · Alibaba (US) Technologylast confirmed 2026-10-3043.164.191.203ViperAS132203 · Tencent Building, Kejizhongyi Avenuelast confirmed 2026-10-1143.153.171.132ViperAS132203 · Tencent Building, Kejizhongyi Avenuelast confirmed 2026-09-1043.143.94.53ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3014.116.159.128ViperAS4134 · No.31,Jin-rong Streetlast confirmed 2026-10-308.138.179.29ViperAS37963 · Hangzhou Alibaba Advertisinglast confirmed 2026-10-30111.230.143.136ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3045.192.105.141ViperAS401701 · cognetcloudlast confirmed 2026-09-1249.235.130.208ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-30113.44.90.0ViperAS55990 · Huawei Cloud Service data centerlast confirmed 2026-08-29113.44.89.87ViperAS55990 · Huawei Cloud Service data centerlast confirmed 2026-10-30111.170.148.132ViperAS151185 · China Telecomlast confirmed 2026-10-30106.54.41.209ViperAS45090 · Shenzhen Tencent Computer Systems Com…last confirmed 2026-10-3023.88.110.42PoshC2AS24940 · Hetzner Onlinelast confirmed 2026-10-30107.172.20.215ViperAS36352 · HostPapalast confirmed 2026-06-13archived